Re: RWW: version=1 msgtype=status status=-3 message=Password Inco



Hi Shawn,

It is not a good idea to use the DMZ port on the router. And I don't think
the Linksys is issuing that certificate. What kind of DSL modem do you have
and can you control it?

--
Regards,

Marina Roos
Microsoft SBS-MVP
One of the Magical M&M's
www.smallbizserver.net
Take part in SBS forum:
http://www.smallbizserver.net/Default.aspx?tabid=53

"Shawn O'Connor" <ShawnOConnor@xxxxxxxxxxxxxxxxxxxxxxxxx> schreef in bericht
news:23619EE2-A2CC-482C-B40F-3F30FB5C7A42@xxxxxxxxxxxxxxxx
Hmmm...that is a good suggestion and I did think about that a while ago.
I
did recently change my router to the Linksys WRV54G, BUT I'm not doing any
port forwarding, etc that I know of. Since I am running ISA 2004 on the
Server with the 2 NIC cards I just have the Server on the router's DMZ. I
just didn't see a way that the router could be pushing its own certificate
out there.

However, it doesn't hurt to change some things around and see if I can't
force a situation where I'm certain the router is not involved at all --
just
to eliminate that as a possibility. I'll have to think about how to do
that
and still be able to test over the internet. I don't have an extra router
laying around.

I guess I could just plug the DSL modem into the external NIC on the
Server
and use that interface directly. I used to do that, but it didn't seem to
be
very reliable. That was back with ISA 2000 -- and I haven't tried the
same
config with ISA 2004. I'll post back and let you know.

--Shawn

"Marina Roos [SBS-MVP]" wrote:

Hi Shawn,

Can you double check your router and see if that is configured for
remote
access through port 443? If yes, turn off that remote access or change
the
port to something else. I think the certificate is from your router.
Do not change anything manually in IIS regarding the certificate. It
SHOULD
show the publishing there.

--
Regards,

Marina Roos
Microsoft SBS-MVP
One of the Magical M&M's
www.smallbizserver.net
Take part in SBS forum:
http://www.smallbizserver.net/Default.aspx?tabid=53

"Shawn O'Connor" <ShawnOConnor@xxxxxxxxxxxxxxxxxxxxxxxxx> schreef in
bericht
news:64C77AA4-1E44-4862-9D41-6DD8ADBE2D85@xxxxxxxxxxxxxxxx
Doing a little more research, I found a post in Google that was
handled
through this newsgroup last year that seems very similar to this
issue.
Unfortunately the thread does not seem to be complete. Perhaps
someone at
Microsoft has some more complete info on this? See below:



http://groups.google.com/group/microsoft.public.windows.server.sbs/browse_thread/thread/ed466c927b150e4b/15610870b46b9369?lnk=st&q=rogue+certificate&rnum=1&hl=en#15610870b46b9369

"Shawn O'Connor" wrote:

By the way, as was posted earlier -- I AM running ISA 2004 on this
server.

Thanks,

--Shawn


"Shawn O'Connor" wrote:

Steve,

I checked everything you said to check. All was set the way it is
supposed
to be.

I reset the IUSR accounts and ran the cscript administrative
scripts.
Reset
IIS and tried once more -- same error message.

What's next? --Thanks.

"Shawn O'Connor" wrote:

Marina -- I tried emailing you from my yahoo account but I got
the
following
error message: "Sorry, I couldn't find any host named
roos.nodontwantspam.nl.com".

I'll post back with the results from Steven's suggestions.

Thanks again.

--Shawn








.



Relevant Pages

  • Vulnerability in Linksys Router access
    ... SSL is used to secure ... All routers used the same certificate and private key. ... different router have a unique software load. ...
    (Bugtraq)
  • Re: Remote web workplace wont work
    ... certificate generation, and to access the RWW from a remote computer. ... Les Connor [SBS Community Member - SBS MVP] ... >> If it is working inside your network, you will have to check the router ... >>> "gateway router". ...
    (microsoft.public.windows.server.sbs)
  • Re: WM5 + ActiveSync 4.1 + ISA 2004
    ... Would you mind telling me what router you are using please? ... addition to mail.domain.com.au certificate. ... We are using self signed SSL ... publicdns.domain.com resolves to the internal IP address of the server ...
    (microsoft.public.windows.server.sbs)
  • Re: WM5 + ActiveSync 4.1 + ISA 2004
    ... Would you mind telling me what router you are using please? ... All I had to do is import publishing.domain.local certificate into my xda ... We are using self signed SSL ... publicdns.domain.com resolves to the internal IP address of the server ...
    (microsoft.public.windows.server.sbs)
  • Re: Remote web workplace wont work
    ... Marina, thanks for you help. ... >> through the router from the internet everything works great. ... >> local network computer in the same network segment as the SBS's external ... >> trrough to SBS and I get the same certificate screen but when I click ...
    (microsoft.public.windows.server.sbs)

Loading